Security Alert (A26-11-20): Multiple Vulnerabilities in OpenSSL


 

Published on: 11 November 2026

Description:

OpenSSL has released 3.5.10, 4.0.4 and 4.1.1 to fix the vulnerabilities in various versions of OpenSSL. The details of the security update can be found at:
https://openssl-library.org/news/secadv/20261110.txt

 

Affected Systems:

  • OpenSSL 3.5.0 prior to version 3.5.10
  • OpenSSL 4.0.0 prior to version 4.0.4
  • OpenSSL 4.1.0 prior to version 4.1.1

 

Impact:

Successful exploitation of the vulnerabilities could lead to remote code execution, denial of service or information disclosure on an affected system.

 

Recommendation:

Patches for affected software are available. System administrators of affected systems should follow the recommendations provided by the software vendor and take immediate actions to mitigate the risk.

 

More Information:

  • https://openssl-library.org/news/secadv/20261110.txt
  • https://www.cve.org/CVERecord?id=CVE-2026-107496
  • https://www.cve.org/CVERecord?id=CVE-2026-88822
  • https://www.cve.org/CVERecord?id=CVE-2026-88823
  • https://www.cve.org/CVERecord?id=CVE-2026-95691
  • https://www.cve.org/CVERecord?id=CVE-2026-95692
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-88822 (to CVE-2026-88823)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-95691 (to CVE-2026-95692)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-107496


Tag: OpenSSL
Tags